Library

How do you find all the AI your company uses?

An AI inventory lists every AI tool your company uses, including shadow AI. Where to look, a common mistake to...

How do AI ethics, governance and compliance differ?

AI ethics sets the principles, governance sets roles and decisions, compliance meets specific rules. How they differ and why a...

How do you respond to an AI incident?

What to do in an AI incident: six response steps, and the GDPR and EU AI Act reporting duties that...

What does AI transparency require?

What AI transparency requires: EU AI Act Article 50 disclosures, duties to explain decisions under the GDPR and Article 86,...

What AI documentation should you keep?

Which AI documentation to keep: inventory, assessments, approvals, tests, training, vendor files, incidents and changes, plus AI Act and GDPR...

Are you a provider or deployer under the AI Act?

Provider or deployer? How the EU AI Act assigns roles, when a deployer becomes a provider under Art. 25, and...

What should an AI use policy include?

What an AI use policy should include: permitted uses, data rules, tool approval, human review, incidents, training and ownership, and...

What AI literacy training do staff need?

What AI literacy training staff need under Art. 4 of the EU AI Act: proportionate measures by role, from all...

What should you ask an AI vendor?

The questions to ask an AI vendor about your data, model changes, incidents, output rights and its EU AI Act...

How do you approve a new AI use case?

How to approve a new AI use case: request, risk triage, testing, pilot and a decision by a named owner,...